45.70.238.27
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- NEGOCIOS Y TELEFONIA NEDETEL S.A.
- Usage Type
- Fixed Line ISP
- ASN
- AS52468
- Hostname(s)
- 27-238-70-45.ufinetlatam.net.ec
- Domain Name
- nedetel.net
- Country
- 🇪🇨 Ecuador
- City
- Guayaquil, Guayas
Abuse Reports
Total reports
95 from
55 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: SSH/Telnet brute-force. 2 events observed. Reported automatically from a honeypot sensor.
|
Brute-Force SSH | |
| 🇺🇸 ipblock.com |
IPBlock protected site ID [4055-d][s=03].
Persistent 404, vulnerability scanner
|
Hacking Bad Web Bot Web App Attack | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇦 URAN Publishing Service |
[24/Oct/2026:14:03:14 +0300] -- 45.70.238.27 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-json/wp/v2/users/me HTTP/1.1
|
Bad Web Bot Web App Attack | |
| 🇺🇸 RAP |
2026-10-23 02:05:36 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| Anonymous |
[ns3.backorder.gr] httpd-suspicious-path: sites=www.blazos.com; logs=/var/log/httpd/domains/blazos.com.log; samples=/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 | /wp-json/wp/v2/users?per_page=100&_fields=id,slug&per_page=100&page=1
|
Hacking Web App Attack | |
| 🇨🇦 senkodev |
|
Brute-Force SSH | |
| Anonymous |
Trying ports that it shouldn't be.
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 RAP |
2026-10-16 15:19:02 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| Anonymous |
Unauthorized connection to Telnet port 23
|
Port Scan | |
| Anonymous |
Tried our host z.
|
Port Scan Hacking Exploited Host | |
| Anonymous |
2026-10-12T09:21:46.488409+00:00 Canada1 sshd-session[3546298]: Connection closed by 45.70.238.27 port 47110 [preauth]
2026-10-12T09:21:52.582612+00:00 Canada1 sshd-session[3547269]: Connection closed by 45.70.238.27 port 33780 [preauth]
...
|
Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown